Iskratel SI2000 CALLISTO821+ User manual

SI2000 CALLISTO821+ ROUTER

USER GUIDE

SI2000 Callisto821+ Router User Guide

KSS5320A2-ATE-010 2/109

Index:

1 SI2000 CALLISTO821+ ROUTER 6

1.1 Features of SI2000 Callisto821+ Router 6

1.2 Using SI2000 Callisto821+ Router 6

1.2.1 Internet access 6

1.2.2 Security 7

1.3 Package contents 7

2 GETTING STARTED 8

2.1 Installation of hardware 8

2.1.1 Ports 8

WAN 8

RES (Reset button) 8

Ethernet 10Base-T/100Base-T port 8

AC power socket 8

2.1.2 Light indicators 9

2.1.3 Ethernet (UTP) cables 10

2.2 Preliminary setup 11

2.2.1 LAN and TCP/IP setup 11

User defined IP address 11

Obtain an IP automatically 12

2.2.2 Telnet management connection 12

2.2.3 WEB management connection 14

3 MANAGING SI2000 CALLISTO821+ ROUTER 16

3.1 Telnet management 16

3.1.1 CLI terminology 16

Transport 16

Interface 16

Object 17

List 17

Example: Attaching a transport to an interface 17

3.1.2 CLI command groups 18

3.1.3 CLI conventions 19

add 19

delete 19

clear 20

set 20

show 20

3.1.4 Help with completing CLI commands 21

3.1.5 User accounts 22

Adding new users 22

User passwords 23

Changing user settings 23

3.2 WEB management 24

3.2.1 About WEB management 24

Status 25

Quick start 25

System 25

Configuration 25

SI2000 Callisto821+ Router User Guide

KSS5320A2-ATE-010 3/109

3.2.2 Status page 25

Status 25

Advanced Diagnostics 25

Port Connection Status 26

WAN Status 26

LAN Status 26

Hardware Status 26

Defined Interfaces 27

3.2.3 Quick Start page 27

Creating a login using DHCP 28

3.2.4 System page 30

Event Log 30

Remote Access 31

Firmware Update 32

Backup / Restore 32

Restart Router 32

3.2.5 Configuration page 33

Save Configuration 33

Authentication 34

LAN Connections 37

WAN Connections 39

Security 43

ZIPB 44

IP Routes 46

DHCP server 48

DHCP relay 52

DNS client 54

DNS relay 55

Bridge 55

3.3 Ports 56

3.3.1 ADSL Port 57

3.3.2 Ethernet ports 57

3.4 System (backup, restore, reset) 58

3.4.1 Backup / Restore 58

Backup configuration 58

Restore configuration 59

3.4.2 Restart 60

Restart 60

3.5 Firmware upgrade 61

3.5.1 Upgrade 61

Update 61

4 BRIDGED CONFIGURATIONS 62

4.1 Creating new bridged connection 62

4.2 Changing ATM QoS parameters of the connection 64

4.3 Changing scheduler profile 65

4.4 Changing bridge interface settings 66

4.5 Bridge settings 67

4.6 Interface configuration 68

4.7 VLAN Configuration 68

4.7.1 Creating new VLAN 69

4.8 Forward All/Unregistered Configuration 71

SI2000 Callisto821+ Router User Guide

KSS5320A2-ATE-010 4/109

5 ROUTED CONNECTIONS 72

5.1 About routed configurations 72

5.2 PPPoE routed 72

5.2.1 Computer configuration 72

5.2.2 Creating connection 73

5.2.3 Modifying connection 76

5.3 RFC1483 routed 77

5.4 PPPoA routed 79

5.5 IPoA routed 81

5.6 PPPoE over Ethernet/Bridge routed 83

6 QUALITY OF SERVICE 85

6.1 ATM Quality of Service 85

6.2 Ethernet based Quality of Service 85

6.2.1 Configuring Scheduler 86

Listing current scheduler profiles 86

Creating new scheduler profile 87

Difference between priority and wf2qplus scheduling 87

7 INTERNET ACCESS 88

7.1.1 Encapsulation 89

IPoA 89

RFC1483 89

PPPoE 89

PPPoA 89

7.1.2 VPI and VCI 90

7.1.3 Multiplexing 91

VC-based multiplexing 91

LLC-based multiplexing 91

7.1.4 WAN IP Address 91

8 SECURITY OPTIONS 92

8.1 Security 92

8.1.1 Enabling security 93

Enabling security 93

Enabling Firewall and Intrusion Detection 93

Setting a default security level 93

8.1.2 Configuring security interfaces 94

Configuring security interfaces 94

8.2 NAT 95

Global IP Address Pools 95

Reserved Mappings 95

DMZ 95

8.2.1 Configuring NAT 96

Configuring NAT 96

8.2.2 NAT Global Address 97

Configuring NAT global addresses 97

8.2.3 NAT Reserved Mapping 99

Configuring NAT reserved mapping 99

8.3 Firewall 100

Port Filtering 100

Validators 100

SI2000 Callisto821+ Router User Guide

KSS5320A2-ATE-010 5/109

Triggers 100

Intrusion Detection 100

8.3.1 Firewall policies 101

Configuring Firewall policies 101

Configuring Portfilters 102

Configuring Validators 104

8.3.2 Triggers 105

Configuring Triggers 105

8.3.3 Intrusion Detection Settings 107

Configuring Intrusion Detection Settings 107

9 TROUBLESHOOTING 108

9.1 Recovery mode 108

9.1.1 Flash memory 108

Main flash memory 108

Recovery flash memory 108

9.1.2 Updating main flash memory 108

Configuring LAN interface on PC 108

Updating flash memory 109

9.2 Dealing with difficulties 109

SI2000 Callisto821+ Router User Guide

KSS5320A2-ATE-010 6/109

1 SI2000 CALLISTO821+ ROUTER

1.1 Features of SI2000 Callisto821+ Router

Your SI2000 Callisto821+ Router router features:

- high speed data transmission on single twisted copper pair for Internet access

- full rate operations up to 24 Mbit/s in downstream

- 10/100BaseT Ethernet port for LAN or PC connection

- PPPoE (RFC2516) connection support for accessing the Internet

- PPP over CHAP or PAP

- support for PPP over ATM

- support for IP over ATM

- RFC1483 bridged and routed support

- IEEE 802.1q VLAN support

- IEEE 802.1p Ethernet based quality of service

- DHCP server for easy IP address management

- DHCP relay

- DNS client

- DNS relaying

- WEB management and Telnet management over CLI (Command Line Interface) for LAN users

- firmware upgrade over WEB management

- support for VC based and LLC based multiplexing

- NAT (Network Address Translation) for single IP address Internet connection, used by the whole LAN

community

- firewall filtering functions, allowing better network security and management

- intrusion detection

1.2 Using SI2000 Callisto821+ Router

1.2.1 Internet access

Your SI2000 Callisto821+ Router can also be used for high speed Internet connections. The TCP/IP

standards, most commonly used for using the Internet, are supported by the router. The PPPoE connections

in dial-up or dial-in mode are also possible. In order to use your SI2000 Callisto821+ Router for Internet

access, there must be a DSLAM installed at a provider company's infrastructure near you. DSLAM is a rack

of ADSL line cards that links many customer ADSL connections to a single high speed ine. A typical Internet

access application is shown below on figure 2.

You can also use NAT (Network Address Translation) services that your SI2000 Callisto821+ Router

provides when setting up an Internet connection. This feature allows multiple users on LAN to use the

Internet connection, basing on one IP address. The DNS server and DNS relaying is also supported.

SI2000 Callisto821+ Router User Guide

KSS5320A2-ATE-010 7/109

Figure 1: Example of Internet access connection

1.2.2 Security

Connecting your computer to the Internet exposes it to a wide range of risks. The SI2000 Callisto821+

Router comes with security functions to safeguard your system and data. Three types of interfaces can be

controlled by the Firewall: Internal (LAN), external (WAN) and DMZ (DeMilitarized Zone). A DMZ is usually

used by a company that wants to host its own Internet services without sacrificing unauthorized access to its

private network. Typically, the DMZ contains devices accessible to Internet traffic such as HTTP, FTP, DNS

and SMTP servers. You can configure the Firewall to allow or block access from one interface type to

another interface type.

You can configure the Firewall by using a default Security level, by Firewall port filters, by Firewall validators

and by Security triggers.

1.3 Package contents

SI2000 Callisto821+ Router package comes with following items:

1. SI2000 Callisto821+ Router unit

2. AC adapter

3. Ethernet UTP cord

4. CD-ROM containing user's guide

internet

DSLAM

DSL line

ethernet cable

SI2000 Callisto821+ Router User Guide

KSS5320A2-ATE-010 8/109

2 GETTING STARTED

2.1 Installation of hardware

2.1.1 Ports

The following figure shows the rear panel of your SI2000 Callisto821+ Router.

Figure 2: The rear panel of the SI2000 Callisto821+ Router

WAN

This port is used for connecting the ADSL cable to your phone jack. Connect the SI2000 Callisto821+ Router

to the ADSL port to access the Internet.

RES (Reset button)

This button is used to reset the configuration of the router to factory default values. You must hold this button

while the router is starting-up until ALM led will start flashing fast (about 30 seconds). Callisto821+ will use

factory default settings only for the time it is running. If you want to preserve factory default settings save the

configuration.

Ethernet 10Base-T/100Base-T port

Use a straight-through or crossover ethernet cable (2.1.3Ethernet (UTP) cables) to connect your SI2000

Callisto821+ Router to a computer or any other device. It is possible to manage the settings of the router with

telnet connection using this port. The factory setting for IP address is 192.168.1.1.

AC power socket

Plug the power cable to ensure power to the SI2000 Callisto821+ Router.

SI2000 Callisto821+ Router User Guide

KSS5320A2-ATE-010 9/109

2.1.2 Light indicators

The following figure shows the front panel of your SI2000 Callisto821+ Router.

There are five LEDs on the front panel of the router that indicate the status of your SI2000 Callisto821+

Router. The description is given in table 1.

table 1: LEDs description

LED Status Description

PWR on Power on.

off Power off or fatal malfunction.

100M/10M on Ethernet link is established. No ethernet activity.

off No ethernet link established.

blinking Ethernet activity.

WAN on ADSL line is established.

off ADSL interface is not functional.

blinking slow ADSL interface is in handshake mode looking for DSLAM

blinking fast ADSL interface detected DSLAM on the other side and

negotiating link parameters.

ALM blinking malfunction

Figure 3: The front panel of the SI2000 Callisto821+ Router

SI2000 Callisto821+ Router User Guide

KSS5320A2-ATE-010 10/109

2.1.3 Ethernet (UTP) cables

You should use a straight-through Ethernet cable to connect your SI2000 Callisto821+ Router to a computer

directly or use a crossover cable to connect to an external hub. The explanation on what does that mean

follows.

There are 8 contacts on UTP connector, described in the next table. The UTP connectors are shown on

figure 5 :

table 2: UTP contacts

Contact MDI signal

1 TD+

2 TD-

3 RD+

4 Not used by 10Base-T

5 Not used by 10Base-T

6 RD-

7 Not used by 10Base-T

8 Not used by 10Base-T

In case of straight-through cable, the contacts on both sides of the cable are connected in the same way, like

shown on the left side of figure 6.

In case of crossover cable, the contacts on both sides of the cable are connected cross-over, like shown on

the right side of figure 6.

Figure 5: Ethernet cable: straight-through connected cable (left) and crossover connected cable (right)

Figure 4: The UTP connectors

Table of contents

Other Iskratel Network Router manuals

Iskratel

Iskratel SI2000 Ganymede 822+ User manual

Popular Network Router manuals by other brands

Allnet

Allnet ALL0333AU user guide

HomeSeer

HomeSeer HT-SEL Getting started guide

Sercomm

Sercomm Genesis OC3505D Quick installation guide

Billion

Billion BIPAC 5102 Series user manual

TP-Link

TP-Link TD-8817 QIG

Motorola

Motorola MR1900 user guide

Digi

Digi IX14 user guide

Cisco

Cisco NCS 540 Hardware installation guide

XAVi

XAVi X8821e user manual

BEC

BEC 6200WZL Quick installation guide

MikroTik

MikroTik hAP ac3 Series quick start

Korenix

Korenix JetNet 5428G Series user manual

NETGEAR

NETGEAR FS526T - Switch installation guide

Korenix

Korenix JetNet 5710G Series user manual

Automated Logic

Automated Logic ZN551 Technical instructions

Cisco

Cisco ASR 1000 Series Installation and configuration guide

EnGenius

EnGenius ESR-9710 quick start guide

Cisco

Cisco 805 Series Product overview